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CROSS-REFERENCE TO RELATED APPLICATION 

This is a continuation of Application Serial No. 08/851,644, which is itself a 
continuation-in-part of Application Serial No. 08/655,469, filed May 30, 1996. 
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FIELD OF THE INVENTION 

The present invention relates to industrial automation, and in particular to 
communication with and among programmable controllers for operating and 
monitoring industrial processes and equipment. 

10 

BACKGROUND OF THE INVENTION 

Sophisticated industrial processes, such as oil refining, automobile assembly 
or power generation, require the cooperative execution of numerous interdependent 
tasks by many different pieces of equipment. The enormous complexity of 

IS ensuring proper task sequencing and management, which requires not only 
procedural logic but constant monitoring of equipment states to organize and 
distribute operations and detect malfunction, has resulted in the widespread 
adoption of programmable controllers. These controllers operate elaborate 
industrial equipment in accordance with a stored control program. When executed, 

20 the program causes the controller to examine the state of the controlled machinery 
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by evaluating signals from one or more sensing devices (e.g., temperature or 
pressure sensors), and to operate the machinery (e.g., by energizing or de- 
energizing operative components) based on a procedural framework, the sensor 
signals and, if necessary, more complex processing. The ''inputs" to a particular 
S controller can extend beyond the sensed state of the equipment the controller 
directly operates to include, for example, its environment, the state of related 
machinery or the state of its controllers. 

Control requirements become even more complex when different aspects of 
the same overall process are assigned to remotely situated equipment. Such 
10 configurations often require reliable, high-bandwidth serial communication links to 
provide the necessary interconnection and handle data transfer among controllers 
and the sensors relevant to their operation. 

Ordinarily, process operation is monitored, at least intermittently, by 
supervisory personnel by means of one or more central management stations. Each 

IS station samples the status of controllers (and their associated sensors) selected by 
the operator and presents the data in some meaningful format. The management 
station may or may not be located on the same site as the monitored equipment; 
frequently, one central station has access to multiple sites (whether or not these 
perform related processes). Accordingly, communication linkage can be vital even 

20 in traditional industrial environments where process equipment is physically 
proximate, since at least some supervisory personnel may not be. 
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To facilitate the necessary communication, the controller processors and 
related computers (such as monitoring stations) are arranged as a computer 
network. A network, basically, is a collection of interconnected computers that use 
some consistent protocol to communicate with one another. Typically, the network 
5 is organized such that any computer may communicate with any other network 
computer. The communication protocol provides a mechanism by which messages 
can be decomposed and routed to a destination computer identified by some fomi 
of address. The protocol may place a "header* of routing information on each 
component of a message that specifies source and destination addresses, and 

10 identifies the component to facilitate later reconstruction of the entire message by 
the destination computer. This approach to data transfer permits the network to 
rapidly and efficiently handle large communication volumes without reducing 
transfer speed in order to accommodate long individual messages, or requiring 
every network computer to process every network message. The degree of routing 

IS depends on the size of the network. Each computer of a local network typically 
examines the header of every message to detect matches to that computer's 
identifier; multiple-network systems use routing information to first direct message 
components to the proper network. 

Controllers have been interconnected by means of computer networks for 
20 some time; see^ e.g,, U.S. Patent No. 5,307,463. In typical systems, a monitoring 
computer, which may be remotely located from any or all of the controllers to 
which it has access, periodically queries the controllers to obtain data descriptive of 
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the controlled process or machine, or the controller itself. This data is then 
available for analysis by the monitoring computer. Heretofore, however, the type 
of information obtainable, on demand, from a controller has been limited, while the 
interface used to present the information on the monitoring computer is typically 
crude. The latter condition results from the multiplicity of data types offered by the 
controller. Were each type of data to be rendered in a format suited to that data. It 
would be necessary to equip the monitoring computer with multiple interfaces, and 
configure the operating application to ascertain the type of data before selecting 
and launching the proper interface. Not only does this scheme impose a substantial 
real-time support burden on the monitoring computer but would also require a 
constantly expanding repertoire of graphical capabilities keyed to new forms of data 
reported by the controllers. This can be especially cumbersome in highly - even 
internationally distributed environments, since the controllers and their 
functionalities may be programmed by personnel having no contact with those 
responsible for central monitoring. 

DESCRIPTION OF THE INVENTION 
Brief Summary of the Invention 

The present invention utilizes the capabilities of the Intemet and, more 
particularly, the interactive capabilities made available by resources such as the 
World Wide Web to shift the burden of providing user interfaces for changing forms 
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of data from monitoring computers to the controllers that actually gather and report 
the data. By combining data with functionality for displaying that data at the 
individual controller sites, the need to equip monitoring computers with specialized 
graphic capabilities is eliminated, along with the need for intensive, ongoing 
5 cooperation between engineers responsible for programming controllers and those 
who configure the computers that perform monitoring. Moreover, because Internet 
users are typically billed for connectivity at a single rate, the long-distance charges 
that would accrue through use of telephone lines for data communication are 
eliminated. 

10 In accordance with the invention, an integrated control system comprises 

one or more controllers each equipped to perform a control function and to gather 
data (ordinarily from sensors) or visual information {e.g., from a video camera) 
relevant to the control function. "Relevant' data includes, at a minimum, any 
information upon which control decisions are made or states shifted, but can also 

IS include information obtained from sensors not directly connected to the controller 
(e.g., involving other controlled machines) but which is nonetheless meaningful to 
supervisory personnel. For example, a chemical synthesis process may be carried 
out at a temperature controlled to stay within an operating range, but the optimal 
temperature may depend on the output of a previous process feeding into the 

20 synthesis; in this case, the temperature of the synthesis process as v/eW as the 
output of the previous process are relevant control parameters with respect to the 
synthesis process. Visual information may Include real-time video or periodically 
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sampled images of control panels, gauges indicating a parameter such as 
temperature, indicator lights or, most usefully, portions of the controlled equipment 
itself. In addition, a file which may be contained, for example. In the web page of 
the video transmission site computer, can include previously stored video data for 
S comparison with current video data. For example, the stored data may be historical 
data comprising previously recorded video images of machine conditions at an 
eariier time, or may instead comprise reference images showing, for example, 
normal machine operation. 

Each controller contains computer storage means, such as computer memory 
10 (volatile and/or non-volatile, such as random-access memory ("RAM"), 

programmable read-only memory ("ROM") or Flash ROM), or a mass storage device 
such as a hard disk or CD-ROM, for storing the relevant data and instructions, 
associated with the data, for causing a remote computer to present the data (e.g., 
by generating a visual display incorporating the data) in a predetermined format; 
IS and a communication module for establishing contact and facilitating data 

interchange with the remote computer. The remote computer. In turn, also includes 
a communication module compatible with the controller-borne module, and which 
enables the remote computer to download the data and associated instructions 
from one or more controllers. The remote computer also includes a facility for 
20 processing the instructions to create a user interface - that is, a visual display, 
which may include video and/or graphics, or other presentations having a 
predetermined format ~ encoded by the instructions, and which incorporates the 
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data or otherwise enables the monitoring engineer to gain as nnuch information 
about the controller as possible. In this way, controller data is coupled to 
instructions for presenting that data, and this totality of information is continuously 
accessible, on a freely selective basis, to the remote computer. 

S It should be stressed that the system may include more than one remote 

monitoring computer, and any of these may not. In fact, be "remote" (in terms of 
distance) at all; instead, they may reside at the same site as the controlled process 
or equipment. Ordinarily, the monitoring computer or computers operate as peers 
with respect to the controllers on a flat network topology. 

10 The invention facilitates a complete window into the operation of one or 

more controllers and, therefore, the industrial equipment they operate. Using the 
invention, remotely located personnel can monitor the efficiency or overall behavior 
of the equipment, visually check machine components, workpteces> or other critical 
components of the controlled system. Additionally, the monitoring engineer can 

IS perform diagnostic checks, or even effect certain maintenance operations. For 

widely dispersed control and supervisory operations, supervisory computers interact 
with the controllers over the Internet, with the controllers continuously connected 
to the Internet as "nodes.'' In local operations, the flexibility conferred by intemet 
formalisms can be retained on a restricted, internal network. 

20 

Brief Description of the Drawings 
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The foregoing discussion will be understood more readily from the following 
detailed description of the Invention, when taken in conjunction with the 
accompanying drawings, in which: 

FIG. 1 schematically depicts a controller in accordance with the present 
S invention; and 

FIG. 2 schematically depicts a system incorporating multiple controllers as 
shown in FIG. 1 and a browser-equipped computer capable of accessing data 
associated therewith. 

Detailed Description of the Preferred Embodiments 

10 The Intemet, which can provide the communication medium of the present 

invention, is a worldwide "network of networks" that links millions of computers 
through tens of thousands of separate (but intercommunicating) networks. Via the 
Internet, users can access tremendous amounts of stored information and establish 
communication linkages to other Internet-based computers. 

15 Much of the internet is based on the cSent-server model of information 

exchange. This computer architecture, developed specifically to accommodate the 
"distributed computing" environment that characterizes the Internet and its 
component networks, contemplates a server (sometimes called the host) - typically 
a powerful computer or cluster of computers that behaves as a single computer - 

20 that services the requests of a large number of smaller computers, or clients, which 
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connect to it. The client computers usually communicate with a single server at 
any one time, although they can communicate with one another via the server or 
can use the server to reach other servers. A server is typically a large mainframe or 
minicomputer cluster, while the clients may be simple personal computers. Servers 
5 providing Internet access to multiple subscriber clients are referred to as 

''gateways'; more generally, a gateway is a computer system that connects two 
computer networks. 

In order to ensure proper routing of messages between the server and the 
intended client, the messages are first broken up into data packets, each of which 

10 receives a destination address according to a consistent protocol, and which are 
reassembled upon receipt by the target computer. A commonly accepted set of 
protocols for this purpose are the Internet Protocol, or IP, which dictates routing 
information; and the transmission control protocol, or TCP, according to which 
messages are actually broken up into IP packets for transmission for subsequent 

15 collection and reassembly. TCP/IP connections are quite commonly employed to 
move data across telephone lines. 

The Internet supports a large variety of information-transfer protocols. One 
of these, the World Wide Web (hereafter, simply, the "web''), has recently 
skyrocketed in importance and popularity; indeed, to many, the Internet is 
20 synonymous with the web. Web-accessible information is identified by a uniform 
resource locator or ''URL,'' which specifies the location of the file in terms of a 
specific computer and a location on that computer. Any Internet "node" — that is. 
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a computer with an IP address (e.g., a server permanently and continuously 
connected to the Internet, or a client that has connected to a server and received a 
temporary IP address) - can access the file by invoking the proper communication 
protocol and specifying the URL. Typically, a URL has the format 
http://<host>/<path> , where "http" refers to the HyperText Transfer Protocol, 
"host" is the server's Internet identifier, and the "path'' specifies the location of the 
file within the server. Each "web site" can make available one or more web 
"pages" or documents, which are formatted, tree-structured repositories of 
information, such as text, images, video, sounds and animations. 

An important feature of the web is the ability to connect one document to 
many other documents using "hypertext" links. A link appears unobtrusively as an 
underlined portion of text in a document; when the viewer of this document moves 
his cursor over the underlined text and clicks, the link - which is otherwise invisible 
to the user - is executed and the linked document retrieved. That document need 
not be located on the same server as the original document. 

Hypertext and searching functionality on the web is typically implemented on 
the client machine, using a computer program called a "web browser." With the 
client connected as an Internet node, the browser utilizes URLs - provided either by 
the user or a link - to locate, fetch and display the specified documents. "Display" 
in this sense can range from simple pictorial and textual rendering to real-time 
playing of audio and/or video segments or alarms, mechanical indications, printing, 
or storage of data for subsequent display. The browser passes the URL to a 
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protocol handler on the associated server, which then retrieves the information and 
sends it to the browser for display; the browser causes the information to be 
cached (usually on a hard disk) on the client machine. The web page itself contains 
information specifying the specific Internet transfer routine necessary to retrieve the 
5 document from the server on which it is resident. Thus, clients at various locations 
can view web pages by downloading replicas of the web pages, via browsers, from 
servers on which these web pages are stored. Browsers also allow users to 
download and store the displayed data locally on the client machine. 

Most web pages are writtenr in HyperText Markup Language, or HTML, which 
10 breaks the document into syntactic portions (such as headings, paragraphs, lists, 
etc.) that specify layout and contents. An HTML file can contain elements such as 
text, graphics, tables and buttons, each identified by a "tag." Markup languages, 
however, produce static web pages. 

Recent innovations have allowed web-page designers to overcome the static 
15 page appearance dictated by HTML. The Java language is a well-known, machine- 
independent, interpreted computer language that facilitates dynamic display of 
information. Java-encoded "applets'' are stand-alone programs embedded within 
web pages that can interact with the user locally, display moving animations and 
perform other functions on "Java-capable" browsers - that is, browsers which 
20 include a Java interpreter. The applet is transferred to the browser along with 

other web-page information and is executed by the Java interpreter; the data acted 
upon by the applet can be located on the same or a different web page, or a 
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different server entirely, since applets can themselves cause the browser to retrieve 
information via hypertext links. 

ActiveX controls represent an alternative to Java, although they typically 
require compatible browsers and computers. These programs can be written in 
many computer languages (including Java) and usually compile to machine code, in 
which case they operate only in conjunction with browsers running machines with 
appropriate processor architectures. Some languages, however, will compile to 
machine-independent byte codes, which can run on a variety of processor 
architectures. 

Suppose, for example, that a client user instructs the client-resident browser 
to obtain a document having the URL http://host/file,htmL The browser contacts 
the HTTP server running on ''host," and requests the document file.htmL The 
server finds this document and sends it according to the proper Internet protocol, 
along with a Multipurpose Internet Mail Extension or "MIME" identifier that 
specifies the document's type. When the client receives the document, the 
browser examines the MIME to determine whether it is capable of autonomously 
displaying the document, or whether an external resource (e.g., a specialized viewer 
to display video segments) is necessary. In a simple case, the document might 
contain text and graphics specified in HTML, and specify an image residing in a 
different file on a different server or on the same server. The browser renders the 
document in accordance with the HTML instructions and requests the image, 
displaying it in the document as specified by the instructions when the image 
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arrives. In more complex cases the document may contain, for example, Java 
instructions, which are passed to the browser's Java interpreter. 

Key to the concept of a web page, therefore, is the division of functionality 
between the client-based browser and the server-based web page, and the 
5 particular roles assigned to each. The browser ipcates, fetches and displays 
resources, executes hyperlinks and applets, and generally interprets web-page 
information; the web page contains data, hyperlink addresses, transfer protocols 
and computer instructions defining "potential functionality" that may be executed 
by the browser. 

10 Ordinarily, web pages reside on servers accessible via the Internet. 

However, the above-discussed mode of splitting functions between web pages and 
browsers can be instituted on internal networks as well. These networks, 
sometimes called ''intranets,'' support the TCP/IP communication protocol and 
typically serve the needs of a single business (or business department), which may 

15 be located at a single site (with individual clients connected by a simple local-area 
network) or multiple physically dispersed sites requiring a wide-area network but 
not access to the Internet. Various of the computers forming the intranet network 
can be utilized as servers for web pages, each with its own URL and offering 
access to network client computers via TCP/IP. A custom "web page* can be 

20 written for the controller in such an intranet. In such a case, JAVA applet 

software, or similar executable code, can be employed to design a page or screen 
providing a menu containing a variety of monitoring tools for the system. Various 

14 
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monitoring functions can be executed by the controller when these monitoring tools 
are selected in accordance with a predetermined protocol or as selected by a 
monitoring engineer. 

The manner in which this divided functionality can be incorporated into a 
5 bank of controllers and a monitoring system is illustrated in FIGS. 1 and 2. With 
reference, first, to FIG. 1 , a representative controller architecture is shown generally 
at 10. The controller 10 executes program instructions to operate, for example, a 
piece of industrial equipment, and includes a central processing unit ("CPU") 12 and 
one or more computer storage devices indicated generally at 1 4. Ordinarily, storage 
10 device 14 is composed of a combination of volatile RAM for temporary storage and 
processing, and non-volatile, programmable read-only memory {"PROM") that 
contains permanent aspects of the controller's operating instructions; however, 
computer storage 1 4 can, if desired, include mass-storage facilities such as a hard 
disk, CD-ROM drive, etc. Such on-board devices are useful if web pages or 
15 security features are expected to change frequently. 

CPU 12 and computer storage 14 communicate over an internal system bus 
1 6. The system further includes a series of input/output modules shown 
representatively at 20,, 20^ that sense the condition of, and send control signals to, 
the controlled machine over a communication link (indicated by arrows). This 
20 -communication link facilitates the bi-directional exchange of signals between each 
I/O module and an associated device (e.g., a sensor or an actuator). 
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In addition, the system includes video block 21 and a video camera (or a 
bank of video cameras) denoted generally at 21a. These are preferably digital video 
cameras associated with the monitored equipment which are directed at those 
portions of the monitored equipment which contain relevant visual information, 

S such as operative machine components from which the position or status of a 
workpiece can be verified. Video block 21 contains appropriate, conventional, 
circuitry for digitizing still images captured by video camera assembly 21a or for 
transmitting full motion video signals received from camera 21a as streaming video 
over the Internet as part of a web site, for example, by way of any other suitable 

10 communication channel. In addition, video block 21 will be responsive to 

commands issued by a remote computer which commands may include: selection 
of a particular camera from the bank of video cameras, changing the orientation of 
a camera, altering the video image capture rate of a particular camera, and/or 
responding to instructions regarding how the video information is to be transmitted. 

IS The signals from such a video camera assembly 21a will be an additional input to 
I/O bus 22 as shown in FIG. 1, or, optionally, to a separate high bandwidth bus 31 
for communication to the network interface 30 (for high bandwidth transmission of 
data to a network-based host). 

I/O modules 20, as well as a network interface 30 that connects the 
20 controller 1 0 to a computer network, reside on or define a secondary I/O bus 22, 
which is driven by a bus transceiver 32; in effect, buses 1 6, 22 and bus transceiver 
32 form a single logical bus. The computer network may be a local-area network 
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of machines communicating via, for example, the Ethernet protocol, or a direct link 
to the Internet. In a local-area network, the computers can implement TCP/IP over 
the low-level Ethernet hardware-management routines to create an intranet, or can 
instead (or in addition) be tied into the Internet as a node via, for example, 
telephone hookup to an external host computer serving as a commercial Internet 
provider. 

Storage 1 4 contains a series of functional blocks or modules that implement 
the functions performed by controller 10 through operation of CPU 1 2. A control 
block 35 contains instructions for operating I/O modules 20. These instructions are 
read in rapid sequence and interpreted to examine the condition of selected sensing 
devices associated with the controlled equipment, and, based thereon, to cause the 
controller to send appropriate operative control signals to the equipment. Typically, 
the instructions are written in a relatively high-level language that permits not only 
manipulation of input and output data, but also arithmetic and timing functions, file- 
handling capabilities and other complex tasks. These instructions are translated 
into machine-readable code by means of an interpreter. For example, one 
standardized type of instruction symbolically represents control functions according 
to a relay ladder diagram; it is preferred, however, to utilize state-control languages 
that represent controller actions in terms of steps, each of which consists of a 
command that creates action and one or more instructions for leaving the step, 
interpreters for these and other types of controller languages are well characterized 
in the art. See, e.g., U.S. Patent Nos. 5,321,829 and 5,287,548 (the entire 
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disclosures of which are hereby incorporated by reference) and the QUICKSTEP^" 
User Guide published by Control Technology Corporation, Hopkinton, MA. Control 
block 35 contains both the specific high-level instructions for operating the 
controller 1 0 and the interpreter module for translating these into instructions 
5 processed by CPU 1 2; its operative relationship to I/O modules 20 is indicated by 
the dashed line. 

A network communication block provides programming to operate local-area 
network hardware and/or to connect with a remote network or network host. In 
the latter case, communication module 37 drives a modem within network interface 
10 30 or other data-transmission circuitry to transfer streams of digitally encoded data 
over telephone or other communication lines. 

Storage 1 4 also contains data structures defining one or more web pages 
shown representativefy at 40^ 4O2. The web pages 40 consist of ASCII data 
obtained from one or more of I/O modules 20, HTML formatting instructions and 

IS associated data, "applet'' instructions that cause a properly equipped remote 
monitoring computer 50 (FIG. 2) to display the data in a dynamic fashion, or 
hyperlinks to other web pages, objects or applets . For example, an applet might 
cause temperature data to be displayed as a graphical representation of a 
thermometer, with the height of the rendered mercury column dynamically varying 

20 in proportion to the data from I/O modules 20 (and constantly provided to the 

remote computer via network interface 30); pressure data might be represented in 
the form of a graphically rendered needle-type pressure gauge. Such renderings 



and the integration of data therein are straightforwardly implemented by those 
skilled in the art (and familiar, for example, with the Java language) without undue 
experimentation. 

In accordance with the invention, web pages for the monitoring computer, or 
other remote computer in the control system, can be constructed to additionally 
display video information. Digital cameras (for example, which are available in 
miniature sizes and may operate on a 12 volt DC power supply), readily allow still 
image capture. Digital cameras capture images on a charge-coupled device, which 
images are then downloaded onto the RAM storage of the camera. Pictures may be 
transferred from the video camera assembly 21a and video block 21 to the 
monitoring computer 50 (FIG. 2) by way of the network interface 30 under 
command of the JAVA applet or other appropriate software for image 
reconstruction on the display monitor being used. Images can be downloaded from 
the camera to the controller computer and can be refreshed, as desired, with each 
download. Full motion video is readily achievable through use of appropriate video 
cameras in camera assembly 21a. 

The resultant video information can then be transmitted from the controller 
10 back to the monitoring computer 50, in the manner desired. For example, 
individual images or full motion video can be transferred back across the Internet 
to the web page of the monitoring computer 50. It is also possible to provide for 
switching between presentation formats, e.g.Jrom periodically refreshed still 
images to full motion video (typically in response to instructions issued by the 

19 



monitoring computer). This may be useful, for example, in the case of a military 
installation or a nuclear site. Appropriate circuitry for accomplishing this switching 
will be provided in video block 21, as desired, in the particular application as wilt be 
understood by those skilled in the art. 

5 A bank of video cameras can be arranged to provide altemative views of the 

monitored equipment, the monitoring computer or other meaningful visual 
information. When assessing operation of the controlled system, the monitoring 
engineer may select which video camera image from the images captured by the 
Video camera bank is to be displayed, as well as the length of time such display is 

10 desired. The monitoring engineer scanning the video/graphic display may decide, 
for example, to make an adjustment to the equipment and to check visually to 
ascertain whether the expected response or event has occurred at the remote 
machine or in the remote process in response to the adjustment. Alternatively, 
database storage of the images can be provided to facilitate subsequent display of 

IS one or more images as part of the control sequence. 

Moreover, historical and/or reference video data may be stored within, for 
example, a file contained in a web page of the computer at the video transmission 
site. As stated earlier, historical video data shows machine operation at an earlier 
time, while reference video data shows normal machine operation. This previously 
20 stored data may be selected for presentation by a remote operator for comparison 
with current video images {e.g., in a side-by-side window configuration for 
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simulataneous presentation, which may also include a graphic frame illustrating a 
selected control or comparison parameter). 

Accordingly, the present invention permits a remote operator to visually 
check a portion of the controlled equipment to verify that the machine is operating 

5 in accordance with the data being received. For example , a command for 

controller actuation of a piston may be given and a video camera can be used to 
verify that the piston has been actuated. Additionally, a video camera can transmit 
images of gauges for verification that a control parameter conforms to data 
received from the controlled system, or that a circuit breaker has opened and a-- 

10 portion or all of the system has been shut down. As will be understood by one 
skilled in the art, there are any number of useful visual checks that can be 
performed by a monitoring engineer with respe^ct to the controlled system using the 
video information obtained in accordance with the invention. 

Referring again to FIG.1, management and transmission of web pages 40 to 
15 a querying computer is handled by a web server module 45, which allows controller 
1 0 to function as a network server. Once again, the features of this module are 
conventional in the art; see, e.g., Yuval Fisher, Sp/n/i/nflr the Web (Springer 1996). 

Incoming data from I/O modules 20 may be processed by control block 35 
before being copied into one of the web pages 40. Because of the linking 
20 capabilities of the web, it is not necessary for the data to be stored in the web page 
containing the display instructions; instead, the latter page may contain a 
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"hyperlink" pointer to a different web page in which data is accumulated, in 
addition, a web page can obtain data from other web pages {e.g., from different 
controllers) by accessing those web pages when appropriate. For example, if a 
cluster of controllers is operationally related such that data from one is usefully 

5 combined with data from the others, each page of the cluster can contain 
instructions to access the other pages (or their associated data pages) when 
accessed by a user, and the applet configured to present data from the entire 
cluster. Alternatively, the applet can be configured to cause the client's browser to 
access the web page. As used herein, data is ''associated with'' a web page or an 

10 applet if it is stored as part of the web page or applet, or stored in a directly or 
indirectly hyperiinked web page. 

Refer now to FIG. 2, which illustrates the manner in which multiple versions 
of the controller 10 are linked and queried by one or more monitoring computers. 
The querying computer 50, which functions as a network client, may be, for 

15 example, a personal computer running the Windows graphical user interface 

supplied by Microsoft Corp. Computer 50 includes a network interface 52, which 
facilitates connection to and data transfer through a computer network 55 (which 
may, again, be a local network, the Internet, or an Internet-linked local network). 
The communications relevant to the present invention are handled by a web ^ 

20 browser 57, which resides within computer 50 and operates the conriputer's display 
(e.g., video or liquid crystal) 60. Naturally, computer 50 also contains various 
conventional components, i.e., system storage, an operating system and a graphical 
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user interface, and a keyboard and/or position-sensing device (e.g., a mouse) for 
accepting input from the user. For convenience of presentation, these are not 
shown. 

Browser 57 contains functionality for locating and fetching, via network 55, 
5 web items (e.g., static pages or pages containing dynamic applets) identified by a 
URL, displaying these, executing applets, executing hyperlinks contained in web 
pages and selected by the user or invoked in an executing applet, and generally 
interpreting web-page information. The web items ordinarily are contained in the 
web pages of one or more controllers 10^, lOsr etc. As explained earlier, the web 
10 pages contain data, hyperlink addresses, transfer protocols and computer 

instructions defining applets, or links thereto. Browser 57 may be any of the 
numerous available web browsers, e.g., NETSCAPE NAVIGATOR (supplied by 
Netscape Communications Corp.) or MOSAIC (different versions of which are 
available free of charge at a variety of web sites). 

15 In a working system, the network interface 30i, SOj, etc. of every controller 

in the system is constantly active and in communication with network 55, 
facilitating access by computer 50 to any controller-based web page(s) at any time. 
In this way, computer 50 can examine the data associated with any controller 
merely by specifying the appropriate URL of the controller's primary web page. The 

20 web page (and, preferably, an applet associated therewith) is copied to browser 57 
and displayed along with the relevant, timely data. For example, the applet, 
executing on client computer 50, can autonomously access data from a web page 



different from the primary page the client user originally specified, all in a manner 
completely invisible to the user. Such access can be periodic or essentially 
continuous for data subject to rapid change. 

Naturally, the network accessibility of control data, particularly over the 
5 Internet, raises security issues. It may be desirable to equip controller-based web 
pages with a password access feature, whereby browser 57 or an executing applet 
must present a password before being accorded access to associated data. In 
addition, the data may be encrypted before being placed on the network. These 
functions are handled by communication module 37, which acts as a gatekeeper to 
10 web server module 45. Security-clearance functions are conventional and readily 
implemented by those skilled in the art. 

Security becomes particularly important if the controller-based web pages 
allow client computer 50 not only to access data, but to modify it as well. For 
example, while ''read-only" access to control data suffices to inform the client user 

IS of the state of a controlled machine or process, the user cannot, if limited to such 
access, influence the operation of the controller. It may prove desirable, therefore, 
to allow an appropriately authorized client to directly modify control parameters 
(which may, for example, be stored on a restricted-access web page) that 
determine the operation of the controller and, hence, the controlled machine or 

20 process. Indeed, a controller-based applet invoked by the user's interaction with 
one of the controller's web pages can permit the remotely situated client user to 
operate the controller hardware — for example, causing the controller to execute a 
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reset routine that restarts automated equipment following shutdown, or causing the 
controller to. operate in a step-by-step fashion for diagnostic purposes. 

It will therefore be seen that the foregoing represents a highly extensible and 
flexible approach to remote access to and presentation of controller information. 
The terms and expressions employed herein are used as terms of description and 
not of limitation, and there is no intention, in the use of such terms and 
expressions, of excluding any equivalents of the features shown and described or 
portions thereof, but it is recognized that various modifications are possible within 
the scope of the invention claimed. 

What is claimed is: 
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